gtars
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the
gtarsPython package andgtars-clicommand-line tool using standard package managers (uv pipandcargo). These are routine operations for installing legitimate software from public registries. - [COMMAND_EXECUTION]: The skill documentation includes numerous examples of using the
gtarsCLI for specialized genomic tasks, including building IGD indexes, generating coverage tracks, and splitting fragment files. The commands are consistent with the skill's stated purpose and do not perform unexpected operations. - [PROMPT_INJECTION]: The skill facilitates the ingestion and processing of external genomic data files (BED, FASTA, TSV), which creates a potential surface for indirect prompt injection. 1. Ingestion points: Untrusted data enters the agent context through methods such as
RegionSet.from_bed(SKILL.md, python-api.md),RefgetStore.from_fasta(SKILL.md, refget.md), and CLI inputs (cli.md). 2. Boundary markers: The instructions do not define specific delimiters or guardrails for the content of these genomic files. 3. Capability inventory: The skill possesses file-writing capabilities (to_bed,to_json) and performs network retrieval via thebbcache fetchcommand (cli.md). 4. Sanitization: There is no mention of sanitizing or validating the contents of ingested genomic data beyond standard format parsing.
Audit Metadata